<?php

/**
 * UserIdentity represents the data needed to identity a user.
 * It contains the authentication method that checks if the provided
 * data can identity the user.
 */
class UserIdentity extends CUserIdentity
{
    //this one holds user's business id, we override default getId method in CuserIdentity
    //not CWebUser
    private $_id;

	/**
	 * Authenticates a user.
	 * The example implementation makes sure if the username and password
	 * are both 'demo'.
	 * In practical applications, this should be changed to authenticate
	 * against some persistent user identity storage (e.g. database).
	 * @return boolean whether authentication succeeds.
	 */
	public function authenticate()
	{
		/*
		 * not reading from data, this is only a simple example
		 $users=array(
			// username => password
			'demo'=>'demo',
			'admin'=>'admin',
            'hello'=>'yes',
		);
		if(!isset($users[$this->username]))
			$this->errorCode=self::ERROR_USERNAME_INVALID;
		else if($users[$this->username]!==$this->password)
			$this->errorCode=self::ERROR_PASSWORD_INVALID;
		else
			$this->errorCode=self::ERROR_NONE;
		return !$this->errorCode;
		*/

        //reading from database

        $record=Account::model()->findByAttributes(array('username'=>$this->username));
        $ph=new PasswordHash(Yii::app()->params['phpass']['iteration_count_log2'], Yii::app()->params['phpass']['portable_hashes']);
        if($record===null)
            $this->errorCode=self::ERROR_USERNAME_INVALID;
        else if(!$ph->CheckPassword($this->password, $record->password))
            $this->errorCode=self::ERROR_PASSWORD_INVALID;
        else
        {
            //get user's business id
            $this->_id=$record->business_id;

            //Is this a vanilla hash?
            if($record->password{0}!=='$')
            {
              $record->password=$ph->HashPassword($this->password);
              $record->save();
            }

            $this->errorCode=self::ERROR_NONE;
        }
        return !$this->errorCode;

	}

    public function getId()
    {
        return $this->_id;
    }

}